$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/B2409F28DF9311EEBF6BC36DC4F9AE02.roa File: B2409F28DF9311EEBF6BC36DC4F9AE02.roa (raw, json) Hash identifier: bOx/MaRmXB38ne/1h1RZYscRhBFAXmNorXwlc1KE7w8= Subject key identifier: 9C:2B:A8:4C:40:5C:EC:A2:9E:12:E0:72:D7:02:36:95:40:5F:64:4B Certificate issuer: /CN=A91AAE16/serialNumber=394EA086895C6F17D936548A32238B82CF79294D Certificate serial: 0FAD Authority key identifier: 39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/B2409F28DF9311EEBF6BC36DC4F9AE02.roa Signing time: Tue 06 May 2025 17:56:36 +0000 ROA not before: Tue 06 May 2025 17:56:36 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134584 IP address blocks: 202.58.140.0/24 maxlen: 24 202.58.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 17:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4013 (0xfad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAE16, serialNumber=394EA086895C6F17D936548A32238B82CF79294D Validity Not Before: May 6 17:56:36 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681a4d53-7f2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:ef:df:af:0d:04:95:1f:f4:ff:28:75:38:07: 4c:2e:ad:0d:2a:69:fe:d2:62:9f:05:ac:8e:4b:5c: e4:d4:83:53:8d:0a:27:da:5d:b2:ce:92:83:a0:bd: e2:93:16:57:6c:06:a9:0a:12:1f:85:8e:fa:a8:4c: da:2c:8f:f4:6f:92:e6:93:2f:e4:41:dd:0b:aa:e2: fe:c1:ae:56:00:d7:1e:cc:a0:0d:a8:1a:af:98:b3: e7:26:4c:e9:b4:dd:3e:52:32:36:72:0f:58:50:25: 3e:94:a1:22:98:82:2b:fd:75:84:a7:bc:71:eb:5d: 4e:e1:b6:24:5e:67:9b:68:d5:6f:14:14:5b:b0:df: 10:7d:89:24:75:37:de:bd:ca:4b:09:de:16:64:0f: 97:70:f5:f0:97:c8:02:3d:b1:c0:4b:1e:10:31:4c: a4:99:ff:a3:71:e8:45:4d:e7:32:e8:73:08:d8:9a: 78:14:f2:d8:79:db:4e:b5:4a:bb:62:5f:db:cd:3a: c2:31:6f:c1:06:7a:ea:a2:fc:15:5f:74:ab:0a:f9: d8:e8:d4:a8:65:f5:67:fa:f6:27:22:83:c7:71:81: a1:98:11:e5:75:25:08:62:ad:77:7b:8e:8e:86:0f: 9b:27:9a:d4:6c:91:9f:ee:d2:17:f1:76:5d:20:30: be:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:2B:A8:4C:40:5C:EC:A2:9E:12:E0:72:D7:02:36:95:40:5F:64:4B X509v3 Authority Key Identifier: keyid:39:4E:A0:86:89:5C:6F:17:D9:36:54:8A:32:23:8B:82:CF:79:29:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/OU6gholcbxfZNlSKMiOLgs95KU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OU6gholcbxfZNlSKMiOLgs95KU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/174885505BB111E98B103B13C4F9AE02/B2409F28DF9311EEBF6BC36DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.58.140.0/24 202.58.142.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:8d:fd:52:4a:4d:e5:cd:3e:dc:fd:00:40:34:f2:b0:7c:6d: 2c:bd:79:81:69:2d:b6:56:fa:f8:fa:ae:01:06:a9:c2:b6:33: 49:01:67:b3:60:89:30:4d:57:5a:c9:e9:57:4c:f1:02:5b:8f: 34:90:6b:67:b7:d2:e3:1d:e5:24:43:8a:fd:87:d8:1d:b2:40: 05:06:30:88:13:e9:f1:ed:89:df:86:6f:70:a1:d6:a9:32:25: 1d:da:a3:4b:4f:10:17:6c:bd:48:a8:c1:9c:bd:4d:c9:d2:ff: b5:bb:71:92:b7:b9:49:f4:b6:89:d1:b4:f5:d0:f6:9e:96:fc: bc:62:3f:7b:cd:7c:d7:e9:72:03:21:f7:21:46:4a:f6:c2:fa: 81:7d:01:0c:29:6c:44:6e:ec:6c:0f:33:0a:00:07:29:e2:0a: 9e:93:d0:ca:0e:2d:63:c8:9d:c3:06:94:b1:55:fc:cd:13:23: a2:1b:29:09:dd:77:bd:8c:87:57:4c:4d:1d:95:ba:33:96:24: 9a:4f:35:dc:3b:5b:56:47:44:ef:54:ec:63:fa:bb:5a:96:fd: 3a:dd:b3:93:aa:6f:0a:ae:5c:3f:db:03:75:3a:52:f0:9f:a0: b7:42:3e:d9:ce:77:0c:10:78:45:f1:3b:06:3f:dd:7d:55:2a: df:f9:8e:7a -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICD60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFMTYxMTAvBgNVBAUTKDM5NEVBMDg2ODk1QzZGMTdEOTM2NTQ4QTMyMjM4Qjgy Q0Y3OTI5NEQwHhcNMjUwNTA2MTc1NjM2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFhNGQ1My03ZjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/O/frw0ElR/0/yh1OAdMLq0NKmn+0mKfBayOS1zk1INTjQon2l2yzpKDoL3i kxZXbAapChIfhY76qEzaLI/0b5Lmky/kQd0LquL+wa5WANcezKANqBqvmLPnJkzp tN0+UjI2cg9YUCU+lKEimIIr/XWEp7xx611O4bYkXmebaNVvFBRbsN8QfYkkdTfe vcpLCd4WZA+XcPXwl8gCPbHASx4QMUykmf+jcehFTecy6HMI2Jp4FPLYedtOtUq7 Yl/bzTrCMW/BBnrqovwVX3SrCvnY6NSoZfVn+vYnIoPHcYGhmBHldSUIYq13e46O hg+bJ5rUbJGf7tIX8XZdIDC+TwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJwrqExA XOyinhLgctcCNpVAX2RLMB8GA1UdIwQYMBaAFDlOoIaJXG8X2TZUijIji4LPeSlN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUUxNi8xNzQ4ODU1MDVC QjExMUU5OEIxMDNCMTNDNEY5QUUwMi9PVTZnaG9sY2J4ZlpObFNLTWlPTGdzOTVL VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09VNmdob2xjYnhmWk5sU0tNaU9MZ3M5NUtVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFMTYvMTc0ODg1NTA1QkIxMTFFOThCMTAzQjEzQzRGOUFFMDIvQjI0MDlGMjhE RjkzMTFFRUJGNkJDMzZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBADKOowDBADKOo4wDQYJKoZIhvcNAQELBQADggEBAJyN/VJK TeXNPtz9AEA08rB8bSy9eYFpLbZW+vj6rgEGqcK2M0kBZ7NgiTBNV1rJ6VdM8QJb jzSQa2e30uMd5SRDiv2H2B2yQAUGMIgT6fHtid+Gb3Ch1qkyJR3ao0tPEBdsvUio wZy9TcnS/7W7cZK3uUn0tonRtPXQ9p6W/LxiP3vNfNfpcgMh9yFGSvbC+oF9AQwp bERu7GwPMwoAByniCp6T0MoOLWPIncMGlLFV/M0TI6IbKQndd72Mh1dMTR2VujOW JJpPNdw7W1ZHRO9U7GP6u1qW/Trds5OqbwquXD/bA3U6UvCfoLdCPtnOdwwQeEXx OwY/3X1VKt/5jno= -----END CERTIFICATE-----Generated at Tue May 13 19:15:40 2025 by rpki-client